Just FYI, Last week Friday (2000/09/08 ~0300 CDT), I noticed that Napster.com moved all of it's advertised server redirectors and servers to a different network: 64.124.41.0/24 I'm just guessing they're only within the "/24"... the current route NETBLK-ABOVENET is for 64.124.0.0/16. The "old" list that I had been working with for detecting Napster flows was this: 208.49.228.0/24, 208.184.216.0/24, 208.49.239.240/28, 208.178.175.128/29 208.178.163.56/29. Here's a useful source of info if you want to see where Napster and work-alike servers are located, a list of "open" servers by IP address: http://www.napigator.com/list.php Anyway, apart from the questionable practice of using these IPs for access-lists, this information is useful for some of us in the measurement community to write detectors that are less likely to get false hits, such as might happen when counting Napster traffic based solely on TCP port numbers. There's a post regarding the required change for FlowScan here: http://net.doit.wisc.edu/~plonka/list/flowscan/archive/0296.html General FlowScan Napster info is here: http://net.doit.wisc.edu/data/Napster/ Dave -- plonka@doit.wisc.edu http://net.doit.wisc.edu/~plonka ARS:N9HZF Madison, WI